Discovery API Icon
Discovery API
Security Advisory Icon
Security Advisory
Package Manager Icon
Package Manager
Alpaquita LinuxStreamSecurity Advisory
Search Cve

CVE-2025-61732

Published: February 5, 2026Last modified: June 16, 2026

Description

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

Severity score breakdown

ParameterValue
Base score8.6
Attack VectorLOCAL
Attack complexityLOW
Privileges requiredNONE
User interactionREQUIRED
ScopeCHANGED
ConfidentialityHIGH
Integrity impactHIGH
Availability impactHIGH
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSgoFixed (1.24.13-r0)
25 LTSetcdFixed (3.6.11-r1)
goFixed (1.24.13-r0)
StreametcdFixed (3.6.11-r1)
goFixed (1.25.7-r0)
Hardened Containers23 LTSgoFixed (1.24.13-r0)
25 LTSgoFixed (1.24.13-r0)
StreamgoFixed (1.25.7-r0)

References

ON THIS PAGE